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BACKGROUND OF THE INVENTION 

1. Field of the Invention 

[0001] The present invention relates to a server, a terminal apparatus and an 
10 image management method that adds a water-mark to document data. 

2. Description of Related Art 

[0002] This application is based on the Japanese Patent Application No. 2002- 
379056 filed on December 27, 2002, entire content of which is expressly 
incorporated by reference herein. 

15 [0003] As noted in the present application, a water-mark means a word such as 
e.g. "confidential " or another indication that is utilized to keep document data 
secret or to indicate another restricted status of the document data. 
[0004] Related Art Japanese Patent Laid Open Publication 2001-318771 (Page 4, 
left column) discloses a printer server that obtains a print job from a client 

20 apparatus. The client apparatus is connected to the same network as the printer 
server. The printer server requests a printer to perform the print job. After the 
printer server adds a water-mark such as "confidential" to document data that is 
transferred from the client apparatus, the printer server instructs a printer to print 
the document data with the water-mark. 

25 [0005] In the related art, the print server analyzes a PDL data in the print job. 
When the printer server find a key word such as "customer " in a document name 
of the PDL data, the printer server judges that the PDL data is confidential. When 
the PDL data is confidential, the printer server takes information customized for a 
particular client, from the print job. The printer server converts the information 
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into a PDL data and sets the converted PDL data as a water-mark. Then the printer 
server combines the PDL data of the document data with the PDL data of the 
water-mark. After that, the printer server requests the printer to print the document 
data with the water-mark based on the combined PDL data. 
5 [0006] The print server can pre -store a PDL data of the water-mark and can add 
the PDL data of the water-mark to the PDL data of document data, instead of 
above information customized for a particular client. 

[0007] However, the above described related art has the following problems. 
[0008] The printer server combines the PDL data of the document data with the 

10 PDL data of the water-mark, and then the printer generates the document data with 
the water-mark based on the combined PDL data. Thus, the water-mark appears 
only on a printed paper. In the other words, when a client see an original image of 
the document data on a display section of a personal computer before the 
document data is printed out, the original image without the water-mark can 

15 appear on the display section of the personal computer. This means that the client 
can edit the original image and the client can transfer the original image without 
the water-mark to another user. Therefore, the related art can not maintain a secret 
status of the original image. 

[0009] The related art requires a printer to have a capability of providing the 
20 water-mark. However, not all the printers have the capability of providing the 
water-mark. When a client uses a printer that does not have a capability of 
providing the water -mark, an original image that must be maintained in a secret 
status will be printed without the water-mark. Therefore, the related art can not 
protect a confidential document from being released to an inappropriate party. 
25 [0010] As above described, the related art determines whether a document data 
is confidential or not, based on the document name of the PDL data. However, the 
document name is easily changed by anyone. If someone deliberately changes the 
document name, a confidential document can be printed out without the water- 
mark. Also before a client adds a water-mark to an image, the client has to know 

-2- 



P24111.S01 



which document names the print server recognizes as keywords indicating 
confidentiality. If the client inputs a wrong keyword, a confidential document will 
be printed out without the water-mark. Therefore, the related art can not protect a 
confidential document from being released to an inappropriate party. 

5 

SUMMARY OF THE INVENTION 
[0011] This present invention is provided to address the above-described 
problems. The purpose of the invention is to provide a server, a terminal apparatus 
and an image management method that make a confidentiality of a document data 
10 clearer and absolutely protect the confidential document from being released to an 
inappropriate party. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0012] The present invention is further described in the detailed description 
15 which follows, with reference to the noted plurality of drawings by way of non - 
limiting examples of exemplary embodiments of the present invention, in which 
like reference numerals represent similar parts throughout the several views of the 
drawings, and wherein: 

Fig.l illustrates a configuration of a network that connects a server with a 
20 plurality of terminal apparatuses; 

Fig.2 illustrates, in block diagram fashion, a configuration of the server; 
Fig.3 illustrates, in block diagram fashion, a configuration of a terminal 
apparatus connected with the server; 

Fig.4 illustrates an example of a structure in which document data are 
25 stored in the server; 

Fig.5 illustrates an example of information stored in a document 
information table of the server; 

Fig.6 illustrates an example of information stored in a user management 
information table of the server; 
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Fig.7 illustrates an example of information stored in a document 
management information table of the server; 

Fig.8 illustrates an example of information stored in an access right 
information table of the server; 
5 Fig.9 illustrates a flow chart describing an operation performed between the 

server and the terminal apparatus when a client reads a document data stored in the 
server; 

Fig. 10 illustrates a flow chart describing an operation performed in ST 912 
of Fig.9; 

10 Fig. 11 illustrates an example of a log file stored in a memory of the server; 

Fig. 12 illustrates a flow chart describing an operation for selecting a water- 
mark in the server; 

Fig. 13 illustrates a flow chart describing an operation for deleting a cache 
area in the server; 

15 Fig.14 illustrates a flow chart describing an operation performed between 

the server and the terminal apparatus when the terminal apparatus sends a print 

instruction to the server; 

Fig.15 illustrates two samples of document data with a water -mark 

displayed at the terminal apparatus; 
20 Fig.16 illustrates a sample of a document data with a water-mark printed 

out; and 

Fig. 17 illustrates a sample of an original document. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 
25 [0013] The embodiment of the present invention is explained in the following, in 
reference to the above -described drawings. 

[0014] Fig. 1 illustrates a configuration of a network to which a server for 
managing document data belongs. In Fig. 1, directions of document data flow are 
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designated with arrows. The network of the present invention can be wired or 
wireless. 

[0015] In Fig. 1, a client 101 and a client 102 are connected with the server 100. 
The client 101 and the client 102 can access the server 100. A printer 103 is 
5 connected with the server 100. The server 100 operates as a printer server. An 
access right is assigned to each client. In the following descriptions, the client 101 
is allowed to only read document data in the server 100. The client 102 is allowed 
to both read document data in the server 100 and to print document data from the 
server 100. Although two clients are shown and discussed, any number or type of 

10 clients, printers, and servers can be provided on the network. 

[0016] The server 100 stores document data which is generated by clients, in a 
data storage area 104 of a memory. When the server 100 receives, from the client 
101, a request that the client 101 wishes to obtain document data from the server 
100, as the client 101 is allowed to only read document data, the server 100 

15 transfers original data of document data stored in the server into image data, adds a 
water-mark to the image data, and transmits the image data with the water-mark to 
the client 101. Thus, the client 101 can see the image data with the water-mark. 
The water-mark is stored in the data storage area 104 of the server 100. 
[0017] When image data with the water-mark are first formed, they are stored in 

20 a cache area 105 of the server 100 up to a certain amount. Storing image data with 
a water-mark helps to reduce the time for generating the image data with the 
water-mark. 

[0018] When the server 100 receives, from the client 102, a request for printing 
an original data from the server 100, as the client 102 is allowed to both read the 
25 original data and to print the original data, the server 100 transfers, to the printer 
103, the original data stored in the server without adding a water -mark. Thus, the 
printer 103 prints out the original data. 

[0019] Fig.2 is a block diagram showing a configuration of the server 100. 
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[0020] The server 100 has a CPU 201 that controls the entire server 100. The 
CPU 201 is connected with a keyboard 202, a mouse 203 and a display section 
204 through buses. Other input and output devices can of course be provided. 
Further, any type of keyboard, mouse, and display can be used in the present 
5 invention. 

[0021] The CPU 201 is connected with a memory 205, a hard-disk 206 that has a 
data storage area 104 in which the above described original data are stored, and a 
hard-disk 207 that has a cache area 105 in which the above described image data 
with the water-mark are stored up to a certain amount, i.e. up to the capacity of the 
10 cache area 105. Of course, any type of data storage mechanism can be utilized 
herein. 

[0022] Memory 205 stores programs which are utilized for controlling the server 
100 by the CPU 201. Memory 205 also provides a work area where the programs 
are executed. Memory 205 stores tables which are utilized for managing the 

15 original data stored in the data storage area 104 of the hard -disk 206. Particularly, 
memory 205 stores a document information table 300, a user management table 
400, a document management table 500, and an access right information table 600. 
[0023] Fig.3 is a block diagram showing a configuration of a terminal apparatus 
connected with the server 100. Here, only the client 101 is explained, since the 

20 client 102 has a similar configuration to the client 101. However, it is within the 
scope of the present application to utilize client terminals of any configuration, 
whether similar to each other or not. 

[0024] The client 101 has a CPU 301 that controls the entire client 101. The 
CPU 301 is connected with a keyboard 302, a mouse 303, and a display section 
25 304 through buses. Of course, any type of input and output devices can be utilized 
herein. Also any type of keyboard, mouse, or display can be utilized. 
[0025] The CPU 301 is connected with a memory 305 which stores programs 
and is utilized for a work area of the programs, and with a hard-disk (HD) 306 or 
other storage medium which stores data made by the client 101. 
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[0026] Next, the relations between the original data stored in the data area of the 
hard-disk 206 and the information stored in the tables of the memory 205, are 
explained. Fig.4 shows examples of the original data stored in the data area of the 
hard-disk 206. 

5 [0027] As illustrated Fig.4, the data area stores an original data 401 assigned 
"D00000001 " as a document ID and stores original data 402 assigned 
"D00000002 " as a document ID. The original data assigned " D00000001 " and 
"D00000002" are stored in a folder 403 assigned " F00000002 " as a folder ID. A 
folder 405 assigned " F 00000001 " as a folder ID stores the folder 402 and 
10 original data 404 assigned " D 00000003 " as a document ID. The information 
stored in the tables of the memory 205 are explained as follows, under the 
assumption that above explained original data are stored in the data area of the 
hard-disk 206 . 

[0028] Fig.5 is an example of information stored in a document information 
15 table 300. As shown in Fig.5, the document information table 300 stores user IDs 
502 which show predetermined users who are given an image data with a water- 
mark, attributes of water-marks 503, file names of water-marks 504 ( in the 
following descriptions, they are identified only as "file names"), locations 505 
which indicate where a water-mark is added in an image data, and pages 506 
20 which indicate at which page of a document a water-mark is added. Each of these 
items of information are stored associated with document IDs 501. 
[0029] In the column of document IDs 501, not only a document ID but also a 
folder ID can be stored. An ID whose the first letter is "D", is a document ID and 
an ID whose the first letter is "F" is a folder ID. A column of folder IDs can be 
25 separated from the column of document IDs 501. 

[0030] When "everyone" is stored in the column of user IDs 502, a 
predetermined user is not specified. This means that an image data with a water- 
mark is given to a plurality of users including a predetermined user and at least 
one other user. In the column of the attributes 503, " data file" is stored, when an 
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image data is utilized as a water-mark. The image data is stored in a data file with 
a file name stored in the column of file names 504. In the column of the attributes 
503, "user name" is stored, when a user name is utilized as a water-mark. The user 
name is a name of a user who reads a document data. 
5 [0031] In the column of file names 504, a file of "Top-secret, tif ' is utilized, 
when the term "Top-secret" is added as a water-mark. "Top-secret, tif" is a file 
that stores an image data of a water-mark showing the term "Top-secret". A file 
of "Confidential, tif" is utilized, when the term "Confidential" is added as a water- 
mark. "Confidential, tif" is a file that stores image data of a water-mark showing 

10 the term "Confidential". In the column of positions 505, a position on a paper 

where a water-mark is added, e.g. "top left" and a point-numbers from a corner of 
the paper, e.g."30:30", are stored. In the column of pages 506, information of 
"Top" is stored, when a water-mark is added at only the front page. 
Information of "ALL" is stored, when a water-mark is added at all pages. 

15 [0032] User IDs 502 of the document information table 300 are managed by the 
user management information table 400. Fig.6 shows examples of information 
stored in the user management information table 400. As shown in Fig.6, user IDs 
102 are stored associated with names 601 of users to whom user IDs 102 are 
assigned. 

20 [0033] Document IDs 501 of the document information table 300 are managed 
by the document management information table 500. Fig.7 shows examples of 
information stored in the document management information table 500. As shown 
in Fig.7, document IDs 501 are associated with edition numbers 701, folder IDs 
702, dates 703, makers 704, and document names 705. The edition numbers 701 

25 shows how many times an original data is revised. The folder IDs 702 shows 
information regarding folders to which the original data belongs. The dates 703 
shows when the original data was made. The makers 704 of the original data 
shows who made the original data. Document names 705 shows the names of the 
original data. 
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[0034] Access rights to Document IDs 501 of the document information table 
300 are managed by the access right information table 600. Fig. 8 shows examples 
of information stored in the access right information table 600. As shown in Fig.8, 
document IDs 501 are associated with user IDs 502 which shows information 
5 regarding a user who can access original data and is associated with access rights 
801 which are given to a particular user for accessing the original data. For 
example, the document ID "D 00000001" is stored associated with "everyone" in 
the column of user IDs 502 and "full access" in the column of access rights 801. 
This means that "everyone" can both read and delete the original data associated 
10 with the document ID "D00000001". The document ID "D00000003" is stored 
associated with "Ohtsuka" in the column of user IDs 502 and "read" in the column 
of access rights 801. This means that only Mr. Ohtsuka can only read the original 
data associated with the document ID "D00000003". 

[0035] The server 100 and the client 101 (102) are configured as described 
15 above. An interaction between the server 100 and the client 101 is explained as 

follows. First, an operation by which the client 101 reads document data stored in 

the server 100, is explained. Fig.9 is a flow chart describing an operation 

performed between the server 100 and the client 101 as a terminal apparatus, when 

the client 101 reads document data stored in the server 100. 
20 [0036] The client 101 needs to input an user ID, when the client 101 logs onto 

the network which is managed by the server 100. The server 100 recognizes user 

IDs of users who utilize the client 101. 

[0037] When the client 101 displays a document data in the server 100 on the 
display section 304, the client 101 instructs the server 100 to transmit a list of 
25 document data which the client 101 can display (ST 901). The server 100 obtains 
the list of document data which the client 101 can display (ST 902) and transmits 
the list to the client 101 (ST 903). 

[0038] The client 101 displays the list on the display section 304 (ST 904), and 
selects a document data based on an input from keyboard 302 or other input device 
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(ST 905). The client 101 requests the server 100 to transmit detailed information 
regarding the selected document data (ST 906). This request includes the 
document ID 501. 

[0039] The server 100 obtains an access right that the user has, based on the 
5 document data, from the document management information table 500 and the 
access right information table 600, based on the document ID 501 and the user ID 
502 (ST 907). The document ID 501 is included in the request and the user ID 502 
has been already recognized by the server 100. The server transmits the access 
right to the client 101 (ST 908). 

10 [0040] When the client 101 receives the access right, the client sets OFF as a 
default in a print valid flag of the memory (ST 909). The print valid flag shows 
whether it is possible or not to print the document data. After setting OFF in a 
print valid flag, the client 101 judges, based on the access right, whether it is 
possible or not to print the document data (ST910). In the other words, the client 

15 101 judges whether the access right includes printing or not. When the client 101 
judges that it is possible to print the document data, the client 101 sets ON in a 
print valid flag (ST 911). After that, the client 101 advances to a document display 
process of ST 912. When the client 101 judges that it is not possible to print the 
document data, the client 101 advances to a document display process of ST 912, 

20 because OFF has been set in a print valid flag (ST 909). 

[0041] The document display process is explained by Fig. 10. Fig. 10 is a flow 
chart describing the document display process performed in ST 912 of Fig.9. 
[0042] Client 101 instructs a displaying of document data (ST 1001). This 
instruction includes a document ID. When the server 100 receives the instruction, 

25 the server 100 obtains the document ID and the user ID (ST 1002). The server then 
proceedes to a file name obtaining process (ST 1003). In the file name obtaining 
process, the server obtains a file name, based on the document ID and the user ID. 
The file name obtaining process will be explained later. 
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[0043] After the file name obtaining process, the server 100 judges whether the 
server should add a water-mark to an image data (ST 1004). Original data of 
document data is transformed into image data. When the server 100 judges that 
the server should add the water-mark to the image data, the server 100 judges 
5 whether the image data with the water-mark has been stored in a cache area 105 of 
the memory (ST 1005). When the server 100 judges that the image data with the 
water-mark has been stored in a cache area 105 of the memory, the server 100 
advances to ST 1010. The server 100 can transmit the image data with the water- 
mark from the cache area 105 to the client 101. When the server 100 judges that 

10 the image data with the water-mark has not been stored in a cache area 105 of the 
memory, the server executes a process for adding the water-mark to the image data. 
Before the process, the server confirms the capacity of the cache area 105. When 
the cache area 105 does not have enough space to save a new data, the server 100 
deletes the image data with the water-mark which are stored in the cache area 105 

15 (ST 1006). This process is called a deleting process of the cache area 105. The 
deleting process of the cache area 105 will be explained later. 
[0044] After the deleting process of the cache area 105, the server 100 reads the 
original data associated with the document ID from the data area of the memory 
(ST 1007). The server 100 reads a file of a water -mark from the data area of the 

20 memory (ST 1008). The server 100 processes the original data and the water-mark 
(ST 1009). Particularly, the server 100 transforms the original data into image data 
in the form of tiff data and adds the water-mark to the image data. The server 100 
stored the image data with the water-mark. 

[0045] When the corresponding file name 504 of the document information table 
25 300 does not store a water-mark, but the corresponding attribute 503 of the 

document information table 300 stores a user name, the server 100 uses the user 
name as the water-mark. This process will be explained later. 
[0046] The server 100 makes a log file regarding the displaying instruction from 
the client 101 (ST 1010). The log file is stored in a predetermined area of the 
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memory 205. As shown in Fig. 11, the log file includes a process time 1101, the 
user ID 502, a host 1102, a process content 1103, the document ID 501, an edition 
701, pages 1104, and a number of copies 1105. After the log file is stored, the 
server 100 transmits the image data with the water-mark to the client 101 (ST 
5 1011). The client displays the image data with the water-mark on the display 304 
section (ST 1012). The document display process then ends. 
[0047] As above explained, the server 100 does not transmit original data, but 
the image data with the water-mark to the client 101. Thus, it will be clearer for 
the client 101 that the original data is confidential. As the original data is 

10 transformed into the image data, the client 101 can not edit the original data. Thus, 
the invention protects the original data from being leaked and from being modified. 
[0048] As above explained, the server 100 judges whether the image data with 
the water-mark is stored in the cache area 105 or not. When the image data with 
the water-mark is stored in the cache area 105, the server 100 submits the image 

15 data with the water-mark from the cache area 105 to the client 101. Thus, when the 
image data with the water-mark is stored in the cache area 105, the server does not 
need to create the image data with the water-mark. Accordingly, the server 100 
can quickly response to the client 101. 

[0049] When a water-mark is not stored in the column of the file name 504 of 
20 the document information table 300, but a user name is stored in the column of the 
attribute 503 of the document information table 300, the server adds the user name 
as the water-mark to the image data. Thus, as this embodiment makes it clear who 
accessed the original data, it protects the original data from being leaked much 
more effectively. 

25 [0050] In ST 1004, when a water-mark is not to be added, the server 100 reads 
the original data associated with the document ED (ST 1013). After the log file is 
stored (ST 1010), the server transmits the original data to the client 101 (ST 1011). 
[0051] Next, the file name obtaining process at ST 1003 of the Fig.10 is 
explained. Fig. 12 is a flow chart for explaining the file name obtaining process. 
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[0052] In the file name obtaining process, the server 100 judges whether the 
server 100 has information associated with the document ID and the user ID in the 
document information table 300 (ST 1201). When the information exists in the 
document information table 300, the server 100 judges whether a corresponding 
5 water-mark is stored in the column of the file name 504 (ST 1202). When the 
water-mark exists in the column of the file name 504, the server 100 obtains the 
water-mark from the column of the file name 504 (ST 1203). 
[0053] As above explained, the water-mark is selected based on the document 
ID and the user ID. Thus, when a combination of the document ID and the user ID 

10 is altered, a water-mark is changed. For example, when Mr. A obtains the 

document data 1, "confidential" may be selected as the water-mark. When Mr. B 
obtains the document data 1, "top-secret/not permitted to print " may be selected 
as the water-mark. When Mr. A obtains the document data 2, "not permitted to 
deliver/not permitted to print " may be selected as the water-mark. When Mr. B 

15 obtains the document data 2, "confidential 99 may be selected as the water -mark. 
Therefore, levels of secrets can be carefully set based on an authority of a person 
and importance of a document data. 

[0054] When the water-mark associated with the document ID and the user ID 
does not exist in the column of the file name 504, the server 100 judges whether a 

20 user name is stored in the column of the attribute 503 of the document information 
table 300 (ST 1204). Thereby, the server 100 judges whether the user name is set 
as a water-mark. When the user name is set as the water-mark, the server adds the 
name of the client 101 who accesses the server 100, as the water-mark to the 
original data (ST 1205). In the other words, the server 100 obtains the user name 

25 associated with the user ID from the user management information table 400 

shown in Fig.6. The server transforms the user name into an image data and adds 
the user name as the water-mark to the image data of the original data. Another 
word such as e.g. a term "reference" may be added to the user name. For example, 



-13 - 



P24111.S01 

"Mr. Ohtsuka refers to this document" may be used as the water-mark. The user 
name as the water-mark is stored in a predetermined area of the memory 205. 
[0055] In ST 1204, when the user name is not set as the water-mark, the server 
100 determines not to add a water-mark to the image data (ST1206). 
5 [0056] In ST 1201, when information associated with the document ID and the 
user ID is not stored in the document information table 300, the server 100 
searches for information that corresponds to the document ID and that "everyone" 
is set as a user name (ST 1207). When the server 100 finds the information, the 
server 100 performs the above noted ST 1202 ~ ST1206. 

10 [0057] In ST 1207, when the document information table 300 does not store the 
information that corresponds to the document ID and that "everyone" is set as a 
user name, the server 100 obtains a folder ID of a folder which includes the 
document associated with the document ID (ST 1208). The server 100 obtains the 
folder ID associated with the document ID from the document management 

15 information table 500. The server 100 judges whether the document information 
table 300 stores information associated with the folder ID and the user ID. When 
the information is stored, the server 100 processes the above ST 1202 ~ ST1206. 
[0058] In ST 1209, when the document information table 300 does not store the 
information associated with the folder ID and the user ID, the server 100 judges 

20 whether the document information table 300 stores information that corresponds to 
the folder ID and that "everyone" is set in the column of the user name 502 (ST 
1210). When the document information table 300 stores the corresponding 
information, the server 100 processes the above ST 1202 ~ ST1206. 
[0059] As above explained, the server 100 can change a type of a water-mark 

25 based on a combination of an user ID and a folder ID which includes the document 
associated with the document ID. For example, when Mr. A obtains the document 
1 in the folder 1, the server 100 can add the water-mark "confidential" to the 
document 1. When Mr. B obtains the same document 1 in the folder 1, the server 
100 can add the water-mark "not permitted to print" to the document 1. Thereby, 
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the server 100 can individually set a water-mark based on a folder that includes the 
document and an authority of a person who obtains the document. 
[0060] In ST 1210, when the document information table 300 does not store the 
information that corresponds to the folder ID and that "everyone" is set in the 
5 column of the user name 502, the server 100 judges whether the server 100 has 
checked the highest folder. When the server 100 has not checked the highest folder, 
the server 100 returns to ST 1208. When the server 100 has checked the highest 
folder, the server 100 judges there is no water -mark associated with the document. 
The process then ends. Whether the server 100 has checked the highest folder can 
10 be determined as follows. For example, the server 100 has a table showing a 

relationship between the folder 403 and the folder 405 in Fig.4. The sever 100 first 
checks the folder 403 and than checks the folder 405. In this case, the folder 405 is 
the highest level folder. After the server 100 has checked the folder 405, the 
process ends. 

15 [0061] Fig. 12 selects a water-mark based on a combination of a document ID 
and a user ID, or based on a combination of a folder ID and a user ID, but the 
invention is not limited to such an embodiment. For example, a water-mark can be 
selected based on only a document ID or based on only a folder ID. A water-mark 
can be also selected based on a combination of a document ID, a user ID, and a 

20 folder ID, as well as other appropriate ID parameter and/or combinations thereof. 
[0062] When a water-mark is selected based on only a user ID, the water-mark 
can be changed based on the user ID. For example, when Mr. A is a manager, 
"confidential" can be selected as the water -mark. When Mr. B is an employee, 
"confidential, not permitted to deliver" can be selected as the water-mark. When 

25 Mr. C is a part-timer, "confidential, not permitted to deliver, not permitted to 

print" can be selected as the water-mark. Since a water-mark is selected based on a 
user as in the above examples, the levels of security of a document can be 
individually set based on each user. 
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[0063] When a water-mark is selected based only on a folder ID, the water-mark 
can be changed based on a folder that stores a document that a user accesses. For 
example, when the document is stored in a folder of company bulletins, 
"confidential" is selected as the water-mark. When the document is stored in a 
5 folder of approvals by the director, "not permitted to be out of the section" is 
selected as the water-mark. When the document is stored in a folder of customer 
information, "top-secret, not permitted to delivery, not permitted to print" is 
selected as the water-mark. Since a water-mark is selected based on a folder as in 
the above examples, the water-mark does not need to be set for each document 

10 individually. Therefore, it becomes simple to set a water-mark for each document. 
[0064] When a water-mark is selected based on a combination of a document ID, 
a user ED and a folder ID, the water-mark can be changed based on the 
combination. For example, "top-secref ' is set as a common water-mark for the 
folder 1. When Mr. A obtains the document 1 in the folder 1, "top-secret, not 

15 permitted to be out of the section" is selected as the water-mark. When Mr. B 

obtains the same document 1 in the folder 1, "top-secret, not permitted to print" is 
selected as the water-mark. When Mr. A obtains the document 2 in the folder 1, 
"not permitted to deliver, not permitted to print" is selected as the water-mark. 
When Mr. B obtains the same document 2 in the folder 1, "confidential" is 

20 selected as the water-mark. When another person obtains the document 1 or the 
document 2 in the folder 1, "top-secret" is selected as the water -mark, as "top- 
secret" is set as the common water-mark for the folder 1. In this case, a water- 
mark is selected based on who obtains which document. Therefore, the levels of 
security of a document can be set in detail i.e. individualized. It is also useful for a 

25 non-specified person to select a common water-mark. 

[0065] In the document information table 300, two types of user IDs can be set 
to be associated with the same document ID. One of the two indicates a plurality 
of users including a predetermined user and at least one other user, e.g. "everyone". 
Another indicates a predetermined user, e.g. "Mr. A". Each user ID has its own 
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water-mark. In this case, either of the water-marks can be given priorities, i.e. 
made the default water-mark. This embodiment is explained by Fig.5. 
[0066] Regarding the document ID "D00000003" in the document information 
table 300 of Fig.5, there are three items of information in the column of user ID 
5 associated with the document ID "D00000003". They are "Everyone", 

"Minakawa", and "Yoshida". In the column of file name associated with the 
document ID "D00000003", "Top-secret, tif ' is set associated with "Everyone" 
and "Confidential, tif is set associated with "Miyakawa" and "Yoshida". Water- 
marks of "Miyakawa" and "Yoshida" are given priority over the water-mark of 
10 "Everyone", because the water-marks of "Miyakawa" and "Yoshida" are used for 
predetermined users. 

[0067] As above explained, both a common water-mark and a predetermined 
water-mark can be stored for a predetermined user. The common water-mark is 
used for all users. When "Everyone" is stored in the column of user ID, a water - 

15 mark associated with "Everyone" becomes the common water-mark. Thus, it 

becomes easy to store the common water-mark, as the common water-mark need 
not be stored for each user. On the other hand, when the predetermined user wants 
to add a predetermined water-mark, the predetermined water-mark should be 
individually stored. The predetermined water-mark is given priority over the 

20 common water-mark. Thus, after the common water-mark has been stored, the 
predetermined water-mark can be newly stored. The predetermined user does not 
need to delete the common water-mark, when the predetermined user newly stores 
the predetermined water-mark. Therefore, it is not complicated to add another 
water-mark for a predetermined user and to change water-marks. 

25 [0068] In this embodiment, a priority is given between a user ID "Everyone " 

which indicates a plurality of users including a predetermined user and at least one 
other user, and a user ID which indicates a predetermined user. However, the 
present invention is not limited to this embodiment. A priority can be given 
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between a folder ID which indicates a predetermined folder and a user ID which 
indicates a predetermined user. 

[0069] In this case, both a common water-mark and a predetermined water-mark 
can be stored for a predetermined user. The common water-mark is used for all 
5 documents of the predetermined folder. The common water-mark for all 

documents of the predetermined folder need not be stored for each user. Thus, it 
becomes easy to store the common water-mark for all documents of the 
predetermined folder. On the other hand, when the predetermined user wants to 
add the predetermined water-mark, the predetermined water-mark should be 

10 individually stored. The predetermined water-mark has priority with respect to the 
common water-mark. Thus, after the common water-mark for all documents of the 
predetermined folder has been stored, the predetermined water-mark can be newly 
stored. The predetermined user does not need to delete the common water-mark, 
when the predetermined user newly stores the predetermined water-mark. 

15 Therefore, adding another water-mark for a predetermined user and changeing 
water-marks is not complicated. 

[0070] Next, an operation for deleting a cache area 105 is explained. Fig. 13 is a 
flow chart describing the operation of deleting the cache area 105 in the server, at 
ST 1006 ofFig.10. 

20 [0071] In the operation of deleting the cache area 105, the server 100 obtains 

information about a maximum storage capacity and a minimum storage capacity of 
the cache area 105 (ST1301). The information about a maximum storage capacity 
and a minimum storage capacity of the cache area 105 are stored in a 
predetermined area of the memory 205. The server 100 can obtain such 

25 information by reading the predetermined area of the memory 205. 

[0072] The server 100 judges whether an amount of data stored in the cache area 
105 has reached the maximum storage capacity of the cache area 105 (ST 1302). 
When a amount of data has not reached the maximum storage capacity, the 
operation ends. When an amount of data has reached the maximum storage 



-18 - 



P24111.S01 

capacity, the server 100 begins an exclusion operation (ST 1303). The exclusion 
operation is an operation that prevents other clients from accessing an image data 
with a water-mark in the cache area 105. 

[0073] In the exclusion operation, the server 100 makes a list of image data with 
5 water-marks stored in the cache area 105 (ST 1304). The server 100 sorts the list 
by the last date when clients accessed the image data with the water-mark (ST 

1305) . The server 100 then deletes the oldest image data with the water-mark (ST 

1306) . After that, the server 100 checks whether a amount of data stored in the 
cache area 105 reaches the minimum desirable storage capacity of the cache area 

10 105 (ST 1307). Finally, the server 100 completes the exclusion operation (ST 
1308). The operation for deleting the cache area then 105 ends. 
[0074] Next, an operation for printing document data will be explained. Fig. 14 is 
a flow chart describing an operation performed between the server 100 and the 
client 102 when the client 102 transmits a print instruction to the server 100. 

15 [0075] The client 102 instructs the server 100 to print document data, after the 
client 102 has performed the above described operation for reading document data. 
In other words, the client 102 instructs the server 100 to print document data, after 
the client 102 has performed the same operations shown in Fig.9 ~ Fig. 13. In Fig. 
14, a water-mark has already been added to an image data that client 102 displays. 

20 [0076] When the client 102 instructs the server 100 to refer to a document data 
(ST 1401), the server 100 performs the water-mark adding operation based on the 
instruction (ST 1402). The water-mark adding operation is shown in ST 1002 ~ ST 
1008 of Fig. 10. This instruction (ST 1401) includes a document ID. After ST 
1402, the server 100 transmits the image data with the water-mark to the client 102 

25 (ST 1403). The client 102 displays the image data with the water-mark on the 
display (ST 1404). 

[0077] Here, a display 304 (Fig.3) of the client 102 will be explained. The 
display 304 displays the image data with the water-mark. Fig. 15 are two samples 
of an image data with a water-mark displayed at the display of the client 102. 
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[0078] As shown in Fig. 15, a document area 1501, a server print instruction 
button 1502 and a local print instruction button 1503 are displayed on the screen 
of the display 304. The document area 1501 displays an image data with a water- 
mark. The server print instruction button 1502 designates a printer which is 
5 connected with the client 102 via network, e.g. the printer 103 to print out the 
document data via the server 100. The local print instruction button 1503 
designates a printer which is connected locally with the client 102 to print out the 
document data. 

[0079] The server print instruction button 1502 changes based on the status of 
10 the print valid flag set in the memory 205, during the reference process shown at 
ST 909 ~ ST 911 of Fig. 9. ON or OFF is set at the print valid flag based on 
whether the client 102 has an access right to print the designated document data or 
not. When the client 102 has the access right to print the designated document data, 
ON is set at the print valid flag. When the client 102 does not have the access right 
15 to print the designated document data, OFF is set at the print valid flag. When the 
print valid flag is ON, the server print instruction button 1502 appears on the 
display section 304, as shown in Fig. 15 (a). When the print valid flag is OFF, the 
server print instruction button 1502 disappears on the display section 304, as 
shown in Fig. 15 (b). 

20 [0080] In ST 1405, the client 102 judges whether the server printer or the local 
printer is selected, based on whether the server print instruction button 1502 or the 
local print instruction button 1503 is selected. 

[0081] When the server print instruction button 1502 is selected, the client 102 
instructs the server 100 to transmit a list of printers connected with the network 
25 (ST 1406). The server 100 generates the list regarding printers that can print out, 
based on the instruction (ST 1407), and transmits the list to the client 102 (ST 
1408). 

[0082] When the client 102 obtains the list, the client 102 displays a print 
instruction screen (ST 1409). A user can select a printed object and a number of 
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prints by using the print instruction screen. The user of the client 102 inputs some 
information at the print instruction screen. After that, the client 102 transmits a 
print instruction to the server 100 (ST 1410). The print instruction includes a 
document ID, a selected printer, and a number of copies. 
5 [0083] When the server 100 receives the print instruction, the server 100 obtains 
an original data associated with the document ID included in the print instruction, 
form the data storage area 104 (ST 1412). The server 100 prints out the original 
data from the designed printer (ST 1413). The server 100 records the print 
instruction of the client 102 in a log file (ST 1414). The server 100 transmits a 

10 print end message to the client 102 (ST 1415). This process ends. 

[0084] As above explained, a user who has an access right can obtain an original 
data without a water-mark. When the user obtains the original data, the server 
records the log of printing the original data. Thus, the server 100 can manage the 
printings of confidential documents and can check unauthorized printings of 

15 confidential documents. 

[0085] In ST 1405, When the local printer is selected, the client prints out an 
image data with a water-mark that is displayed on the display section 304, from a 
printer locally connected with the client 102 (ST 1416). 

[0086] Fig. 16 is a sample of an image data with a water-mark printed out from a 
20 local printer. Fig. 17 is a sample of an original data printed out via the server 100. 
As shown above in Fig.16 and Fig.17, even if the same document data is printed 
out, whenever the document data is locally printed, the document data has always 
a water-mark added thereto. As this document data with the water-mark is an 
image data, a user of the client 102 can not edit the document data. When the 
25 document data is printed via the server 100, the document data does not have a 
water-mark added thereto. 

[0087] As explained above, the server 100 does not transmit an original data 
associated with a reference instruction, but document data with a water-mark to 
the client 101. Thus, this embodiment can make it clear that the document data is 
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confidential. As this document data is transformed into an image data, a user can 
not edit the document data. Thus, this embodiment can prevent the document data 
from being altered and from being released. 

[0088] The above embodiment explains the case that when the client 101 or 102 
5 requests the server 100 to obtain document data, the server 100 submits the 

document data with a water-mark, but the present invention is not limited to this 
embodiment. For example, whenever the server 100 receives the request from the 
client 101 or 102, the server 100 can always judge whether a user of the client 101 
or 102 has an access right. When the user has the access right, the server 100 can 

10 submit, not the document with the water-mark, but the original data to the client 
101 or 102. In this case, a person who made the original data and stored the 
original data in the server 100, can obtain the original data from the server 100 
again. Thereby, the person can ren ew the original data. Thus, this example both 
keeps the document data confidential and allows the maker of the original data to 

15 obtain the original data again. 

[0089] While the term water-mark has been used herein to describe an access 
restricting mark, it is not limited to such. The term can also be used to e.g. identify 
the source of the content of document data, or to provide identifying information 
such as a trademark, logo, or identifying an other designation such as "draft" or 

20 "copy right". Moreover, the water-mark can relate to authentication of the data, 
authorization of copying of the data, origin of the data, or access to the data, 
merely as non -limiting examples. 

[0090] It is noted that the foregoing examples have been provided merely for the 
purpose of explanation and are in no way to be construed as limiting of the present 
25 invention. While the present invention has been described with reference to 
exemplary embodiments, it is understood that the words which have been used 
herein are words of description and illustration, rather than words of limitation. 
Changes may be made, within the purview of the appended claims, as presently 
stated and as amended, without departing from the scope and spirit of the present 
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invention in its aspects. Although the present invention has been described herein 
with reference to particular structures, materials and embodiments, the present 
invention is not intended to be limited to the particulars disclosed herein; rather, 
the present invention extends to all functionally equivalent structures, methods and 
5 uses, such as are within the scope of the appended claims. 

[0091] The present invention is not limited to the above-described embodiments, 
and various variations and modifications may be possible without departing from 
the scope of the present invention. 
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